Urgent Security Warning: LNbits Operators Advised to Shut Down Servers

Overview of the Situation

LNbits, a popular open-source wallet solution for the Bitcoin Lightning Network, has recently flagged significant security vulnerabilities leading to a series of attacks. In response, the project has issued an immediate directive for all operators to disable their servers.

Details of the Exploit

Reports indicate that a security flaw was exploited, allowing unauthorized withdrawals. One affected operator reported losses amounting to 2,285,545 satoshis (approximately 0.023 bitcoins) from his server before any preventive action could be taken.

Timeline of Notifications

The initial warning from LNbits was released at 12:33 UTC, urging operators to deactivate the “Paywall” add-on while investigations were underway. Approximately 80 minutes later, the broader advisory to shut down all LNbits servers was issued.

Current Actions and Response

As of 09:00 UTC today, LNbits had not published a patched version of the software or provided detailed guidance on how operators could ascertain if their servers had been compromised prior to the shutdown announcement. Developer Ben Arc stated that patches should be available within 24 to 48 hours from his message.

Impact on Users and Future Steps

In a significant precautionary move, LNbits has suspended all its cloud service instances as a safety measure, committing to reinstate services within 24 hours. Kevin Ravensberg, a server operator affected by the exploit, confirmed that his server was targeted well before the project’s initial warning and has pledged to compensate users of his Telegram bot service, BitTipBot, once the vulnerabilities are addressed.

Identification of the Exploit

Ravensberg later revealed that security testers, alongside developer Ben Arc, were able to pinpoint the specific extension that was exploited on his server. However, details about the specific extension and its relation to the “Paywall” add-on remain undisclosed as of the latest updates.

Conclusion

This series of events underscores the importance of vigilance within the cryptocurrency community, particularly concerning security protocols. LNbits continues to investigate the breaches while operators await further instructions and necessary updates to safeguard their systems.

Further Information

For ongoing updates and information about security patches, operators are advised to stay connected with official LNbits communications.